diff --git a/debian/README.Debian b/debian/README.Debian
index d29fe9dd9..f20624200 100644
--- a/debian/README.Debian
+++ b/debian/README.Debian
@@ -15,6 +15,15 @@ generated during the linux-2.6 package build.  See the source package for
 details.  Each linux-image-* package provides the complete .config file that
 was used to generate it.  This file is installed in /boot.
 
+Scope of security support
+-------------------------
+Security support is provided not only for the binary builds, but also
+for the full source package, allowing for locally customized kernels.
+However, kernel options that are not enabled in official Debian builds are
+given a lower priority for security support. Options marked as BROKEN
+or EXPERIMENTAL are of very low priority, and should not be enabled in
+customized builds for a security-sensitive environment.
+
 Rebuilding Adaptec AIC7xxx/79xx firmware
 ----------------------------------------
 You can rebuild the firmware for the Adaptec AIC7xxx/79xx SCSI Adapters. To
diff --git a/debian/changelog b/debian/changelog
index 43b709dab..edbbe2920 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -25,8 +25,10 @@ linux-2.6 (2.6.18-6) UNRELEASED; urgency=low
   [ dann frazier ]
   * Backport various SCTP changesets from 2.6.19, recommended by Vlad Yasevich
     (closes: #397946)
+  * Add a "Scope of security support" section to README.Debian, recommended
+    by Moritz Muehlenhoff
 
- -- dann frazier <dannf@debian.org>  Mon, 13 Nov 2006 00:39:30 -0700
+ -- dann frazier <dannf@debian.org>  Mon, 13 Nov 2006 00:42:56 -0700
 
 linux-2.6 (2.6.18-5) unstable; urgency=low